Botoi

The main risk is drift across versions, permissions, and data claims. The home/API/SDK pages say 49 MCP tools, the MCP page says 44, while the live official manifest returns 207 unique tools. The site also alternates between 150+ and 190+ APIs while current OpenAPI has 204 paths and 207 operations. For plans, the maker's Uneed copy says 100 free requests/day and $5/month for 10,000; the home footer says 500/day; API and MCP pages describe anonymous access as 5/minute and 100/day; and the current pricing page gives registered free users 1,000/day with Starter at $9/month. Some may be anonymous versus registered tiers, but the surfaces do not consistently qualify them. The SDK page still shows 0.1.3 while npm latest is 0.6.0. For permissions, the MCP page says its 44 tools are read-only apart from encryption/decryption, yet the live 207-tool manifest includes `paste_create`, `short_url_create`, short-link click counters, and multiple external URL/DNS lookups; granting the whole catalog to an agent is not equivalent to read-only access. For data, the privacy policy says API payloads are kept only long enough to fulfil a request, while official OpenAPI says `paste/create` stores about 1 MB in KV for up to 24 hours and short URLs retain targets and click counts without a stated privacy-page retention or deletion path. Sentry may also receive truncated request context. About's no-account, no-premium, no-gating language accurately describes browser tools but not the account-based paid API. Terms require users to be over 18 while privacy only says the service is not directed below 16. Claims of <50 ms p95, 300+ edge locations, 99.9% SLA, output accuracy, and fully first-party endpoints were not independently tested here.